CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

security/cyrus-sasl2-saslauthd 2.1.28_4

SASL authentication server for cyrus-sasl2

Port info

Maintainer
ume@FreeBSD.org
Packages
latest: 2.1.28_4
Upstream
up to date
Last update
to 2.1.28_4 · 7eb9b79b1d
Quarterly
2026Q4: 2.1.28_4
WWW
https://www.cyrusimap.org/sasl/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install cyrus-sasl-saslauthd
installs 2.1.28_4 from latest; from quarterly (2026Q4) 2.1.28_4
Port
# cd /usr/ports/security/cyrus-sasl2-saslauthd && make install clean
# make -C /usr/ports/security/cyrus-sasl2-saslauthd config  # change options first
Size
45 KiB download · 105 KiB installed
Depends on
security/cyrus-sasl2 2.1.28_6
License
BSD4CLAUSE
Options
4 of 12 on in the package: BDB1 DOCS GSSAPI_BASE LMDB0
Show the 8 options that are off
BDB GDBM GSSAPI_HEIMDAL GSSAPI_MIT HTTPFORM LMDB OPENLDAP SASLDB_IN_VAR
pkg-message
Shown after installing
To run saslauthd from startup, add saslauthd_enable="YES" in your
/etc/rc.conf.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.1.28_42.1.28_4–
FreeBSD 152.1.28_42.1.28_4–
FreeBSD 142.1.28_42.1.28_42.1.28_4

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.1.28_42.1.28_4–
FreeBSD 142.1.28_42.1.28_42.1.28_4

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 2.1.28_4.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (115)

Hajimu UMEMOTO (ume) · 2.1.28_4
security/cyrus-sasl2{,-saslauthd}: Fix build after lmdb update.
7eb9b79b1d
Hajimu UMEMOTO (ume) · 2.1.28_4
security/cyrus-sasl2{,-saslauthd}: add LMDB0 option on by default for backward compatibility
b86d9ca365
Xin LI (delphij) · 2.1.28_4
databases/lmdb0: Add port for LMDB 0.9.x legacy ABI

LMDB 1.0 introduced an incompatible on-disk format change and subtle
API breakage: applications that compiled cleanly against 1.0 headers
could fail silently at run time. Known affected ports include dns/knot3,
mail/bogofilter, and mail/postfix; the postfix issue has been confirmed
upstream. Linux distributions such as Arch Linux have observed the same
breakage. Samba can also be affected in certain configurations.

Because the regression is not detectable in an -exp build run -- the
postfix failure only manifests at run time, and bogofilter was caught
only because post-build self-tests happen to exercise this path -- we
cannot rely on package builds to validate the 1.0 upgrade.

This commit introduces databases/lmdb0 as a holding port for the 0.9.35
release, pinned to the 0.x branch with PORTSCOUT=limit:^0. and mutually
conflicting with databases/lmdb, which retains 1.0. The two packages
cannot be installed simultaneously, but having lmdb0 available means:

* Ports known to require the 0.9 ABI can declare an explicit dependency
  on databases/lmdb0 until they are validated against 1.0.
* Users with existing databases in the 0.9 format can still access the
  mdb_dump and mdb_load utilities to migrate data before upgrading.
* The package conflict prevents accidental mixing.

All 50 direct dependents of databases/lmdb are redirected to
databases/lmdb0 for now with a PORTREVISION bump, effectively restoring
the tree to the state prior to the LMDB 1.0 update. Once all dependent
ports are validated against LMDB 1.0, they will be moved back to
databases/lmdb and databases/lmdb0 will be removed.

PR:             ports/296530
5f9d389f29
Cy Schubert (cy) · 2.1.28_3
security/cyrus-sasl2-saslauthd: Add support for MIT KRB5 in base

FreeBSD 15 will ship with MIT KRB5 in base. Detect this accordingly.

PR:		287597
exp-run by:	antoine
c368214c71
Hajimu UMEMOTO (ume)
security/cyrus-sasl2{,-saslauthd}: Restore GNU_CONFIGURE
c112487870
Hajimu UMEMOTO (ume)
security/cyrus-sasl2{,-saslauthd}: Move manpages to ${PREFIX}/share
e574905acf
Muhammad Moinur Rahman (bofh)
Mk/**ldap.mk: Convert USE_LDAP to USES=ldap

Convert the USE_LDAP=yes to USES=ldap and adds the following features:

- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
  RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features

Reviewed by:	delphij
Approved by:	portmgr
Differential Revision: https://reviews.freebsd.org/D38233
6e1233be22
Stefan Eßer (se)
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se)
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Hajimu UMEMOTO (ume)
security/cyrus-sasl2{,-saslauthd}: lmdb did not work for postfix

- sasldb2-lock requires write permission for mail group
- introduce SASLDB_IN_VAR option which places sasldb into /var/db

Reported by:	Herbert J. Skuhra <herbert@gojira.at>
d0e87be06b
Hajimu UMEMOTO (ume)
security/cyrus-sasl2: Update to 2.1.28.

PR:		262133
Relnotes:	https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
Security:	CVE-2019-19906, CVE-2022-24407
d29e6c0326
Xin LI (delphij)
net/openldap24-server: Make SASL permanent for OpenLDAP port.

PR:		ports/257374
Reviewed by:	obrien
Approved by:	portmgr (exp-run by antoine)
Differential Revision: https://reviews.freebsd.org/D31301
974e13b501
Mathieu Arnold (mat)
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat)
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat)
Remove # $FreeBSD$ from Makefiles.
305f148f48
Hajimu UMEMOTO (ume)
Add LMDB support for saslauthd.

PR:		254321
Submitted by:	nork
fbaec5592a
Mathieu Arnold (mat)
Convert to UCL & cleanup pkg-message (categories s)
bc89cd3d2c
Hajimu UMEMOTO (ume)
Make sure that the owner of /var/run/saslauthd is `cyrus'.
b3e366323b
Hajimu UMEMOTO (ume)
Update to 2.1.27.
b39a664d41
Alexey Dokuchaev (danfe)
Update `databases/gdbm' to version 1.18.1, an important bugfix release which restores compatibility with old databases (version 1.8) and some later versions which were built without mmap(2) support.  Due to shlib version change, bump port revisions of the consumer ports.

PR:		233059
Exp-run by:	antoine
Approved by:	maintainer (johans, numerous timeouts)
936a36e30d
Dmitry Marakasov (amdmi3)
- Fix trailing whitespace in pkg-descrs, categories [p-x]*

Approved by:	portmgr blanket
1f8b48b772
Hajimu UMEMOTO (ume)
Use USES=bdb and USES=mysql.
dc4d5f48f0
Mathieu Arnold (mat)
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight
597afc47ba
Hajimu UMEMOTO (ume)
Add OPENLDAP_SASL option for changing LIB_DEPENDS to openldap-sasl-client.
b7d79ba5b0
Hajimu UMEMOTO (ume)
Make it buildable with GDBM on.

PR:		208194
Reported by:	vas__at__mpeks.tomsk.su
edf26a4683
Hajimu UMEMOTO (ume)
- Make SASLdb excludable. - Make SASLdb buildable with GDBM. - Make sure to disable the plugins where it is not required.
b49e7032a3
Hajimu UMEMOTO (ume)
Move the common part of the cyrus-sasl2 separated ports into Makefile.common, to make further maintenance easier.
90e622d893
Hajimu UMEMOTO (ume) · 2.1.26_3
Use gssapi related descriptions in bsd.options.desc.mk.
4bc3dd8ab6
Hajimu UMEMOTO (ume) · 2.1.26_3
Use OPTIONS helper.
2dd87a10a5
Hajimu UMEMOTO (ume) · 2.1.26_3
- Use USES=gssapi. - OPTIONSfy Kerberos.
a7dcb78228
Hajimu UMEMOTO (ume) · 2.1.26_3
Fix build with clang and MIT Kerberos.

Reported by:	Beat Siegenthaler <beat.siegenthaler__at__beatsnet.com>
14e92b7732
Mathieu Arnold (mat) · 2.1.26_3
Backout r398328 and r398370, they break packages depending on them.

With hat:	portmgr
MFH:		2015Q4
Sponsored by:	Absolight, The FreeBSD Foundation
7f5ef38c3f
Hajimu UMEMOTO (ume) · 2.1.26_2
Sync package name with origin.

PR:		202756
d2c500d787
Baptiste Daroussin (bapt) · 2.1.26_1
Simplify plist
d5b55742d3
Tijl Coosemans (tijl) · 2.1.26_1
Remove a comment about USE_AUTOTOOLS=libtool
546267f9ba
Tijl Coosemans (tijl) · 2.1.26_1
net/openldap24-*: - Convert to USES=libtool and bump dependent ports - Avoid USE_AUTOTOOLS - Don't use PTHREAD_LIBS - Use MAKE_CMD

databases/glom:
- Drop :keepla
- Add INSTALL_TARGET=install-strip

databases/libgda4* databases/libgda5*:
- Convert to USES=libtool and bump dependent ports
- USES=tar:xz
- Use INSTALL_TARGET=install-strip
- Use @sample

databases/libgdamm:
- Drop :keepla
- USES=tar:bzip2
- Use INSTALL_TARGET=install-strip

databases/libgdamm5:
- Add INSTALL_TARGET=install-strip
- Drop --enable-static (inherited from old repocopy)

devel/anjuta x11-toolkits/py-gnome-extras:
- Drop :keepla

dns/powerdns dns/powerdns-devel:
- Convert to USES=libtool
- Add INSTALL_TARGET=install-strip
- Disable static modules
- Stop creating library symlinks with .0 suffix, not needed for dynamically
  opened modules

mail/dovecot2:
- Add USES=libtool

mail/dovecot2-pigeonhole:
- Drop CONFIGURE_TARGET (incorrect for Dragonfly)
- Add USES=libtool and INSTALL_TARGET=install-strip

math/gnumeric:
- USES=libtool tar:xz

Approved by:	portmgr (implicit, bump unstaged ports)
37f54e0f66
Hajimu UMEMOTO (ume) · 2.1.26
fix permission.
8a1caab8cf
Hajimu UMEMOTO (ume) · 2.1.26
- Use USES=libtool - Add one more MASTER_SITE - Add DOCS to OPTIONS_DEFINE
6b0e583dfc
Hajimu UMEMOTO (ume) · 2.1.26
Update LICENSE.
d96095f9b1
Hajimu UMEMOTO (ume) · 2.1.26
use opt_USE knob.

Spotted by:	sunpoet
ac566968aa
Hajimu UMEMOTO (ume) · 2.1.26
- enable stage. - use modern OPTIONS helper. - use modern LIB_DEPENDS format.
69ead28f7f
Baptiste Daroussin (bapt) · 2.1.26
Add NO_STAGE all over the place in preparation for the staging support (cat: security)
a65ed2e51b
Alex Kozlov (ak) · 2.1.26
- Remove MAKE_JOBS_SAFE variable

Approved by:	portmgr (bdrewery)
d4041784dc
Hajimu UMEMOTO (ume) · 2.1.26
Update MASTER_SITES as I forgot to update it when updating to 2.1.26.

Spotted by:	Marten Vijn <info__at__martenvijn.nl>
36b4eb1024
Hajimu UMEMOTO (ume) · 2.1.26
Don't search lib32 on FreeBSD/i386.
e17b4f7b57
Hajimu UMEMOTO (ume) · 2.1.26
If security/krb5 is installed and OPENLDAP option is enabled, it failed to build unless KRB5_HOME is set properly.  Now, only when KRB5_HOME is set properly, it build with security/krb5.

Spotted by:	David Gessel <gessel__at__blackrosetech.com>
4cbb088d05
Hajimu UMEMOTO (ume) · 2.1.26
When building with security/krb5 (specifying KRB5_HOME), make sure to link mit-krb5 libs.
7e9e4ddc3a
Hajimu UMEMOTO (ume) · 2.1.26
Mark cyrus-sasl2 as MAKE_JOBS_SAFE.

Submitted by:	Kevin Zheng <kevinz5000__at__gmail.com>
9e797d382c
Hajimu UMEMOTO (ume) · 2.1.26
Update cyrus-sasl2 to 2.1.26. This bumps shlib version of libsasl2.
dda3fab6a5
Doug Barton (dougb) · 2.1.25
Move the rc.d scripts of the form *.sh.in to *.in

Where necessary add $FreeBSD$ to the file

No PORTREVISION bump necessary because this is a no-op
9aac569eaa